1. Executive summary Hush Security analysed roughly 82,000 publicly accessible MCP configuration files on GitHub and found that 12% of credential slots contained a hardcoded
1. Executive summary On 17 September 2026 the ransomware operator tracked as "qilin" listed the German engineering firm Vigatec (www.vigatec.com) as a
1. Executive summary A zero-click remote code execution flaw, dubbed Plugin4Shell, affects all major AI coding agents: Anthropic Claude Code, OpenAI Codex, Google Gemini CLI,
1. Executive summary CISA has republished Mitsubishi Electric advisory 2026-007 covering CVE-2026-15688, an incorrect implementation of an authentication algorithm (CWE-303) affecting all
1. Executive summary Schneider Electric has released version 1.6 of PowerChute Serial Shutdown to fix CVE-2026-13348, an improper restriction of excessive authentication attempts
1. Executive summary Schneider Electric has released firmware version 5.6.0 for its NetBotz 5 750 and 755 environmental and security monitoring appliances, fixing two
1. Executive summary Schneider Electric has published advisory SEVD-2025-224-05, republished by CISA as ICSA-26-260-04, covering CVE-2025-6625, an improper
1. Executive summary CISA has republished Hitachi Energy PSIRT advisory 8DBD000229 covering five vulnerabilities in the FACTS Control Platform (FCP) with the GWS component, affecting versions
1. Executive summary Microsoft has published a guidance piece built around three observed attack paths: agentic AI incidents disclosed by OpenAI and Anthropic, the CaptiveCrunch campaign
1. Executive summary CISA published ICS advisory ICSA-26-260-01 on 2026-09-17 covering three vulnerabilities in Bransys ELD, an electronic logging device platform
1. Executive summary ABB has released Edgenius 3.2.4.1 to fix CVE-2026-31431 ("Copy Fail"), a Linux kernel privilege escalation in
1. Executive summary On 17 September 2026, the ransomware operator BrainCipher listed the UK engineering consultancy Hoyle Tanner (hoyletanner.com) as a victim on its leak